Repository navigation

fix(auth): invalidate email OTP on a failed guess, not just a match - #2224

Merged

richiemcilroy merged 7 commits into

CapSoftware:mainfrom

addyCooks:fix/otp-verification-token-brute-force

Oct 22, 2026

Merged

fix(auth): invalidate email OTP on a failed guess, not just a match#2224
richiemcilroy merged 7 commits into
CapSoftware:mainfrom
addyCooks:fix/otp-verification-token-brute-force

Commits on Sep 5, 2026
- fix(auth): invalidate email OTP on a failed guess, not just a match
  addyCooks
  committed
  2562bc1
Commits on Sep 6, 2026
Commits on Oct 20, 2026
- Merge main into fix/otp-burn
  richiemcilroy
  committed
  88cae4f
- test(auth): bind the adapter's useVerificationToken so the narrowing reaches the race callbacks
  richiemcilroy
  committed
  93cbaaa
Commits on Oct 22, 2026
- Merge branch 'main' into fix/otp-verification-token-brute-force
  richiemcilroy
  authored
  4f5d0a1